It;s about mangle rules - I want to route mark all packets originated from the router itself to be sent to the specific gateway. I don't want to use default gateway, so in my configuration there is no default gateway. I've tried with output chain in mangle, but no success. Maybe you can send me exam...

I've spend almost 2 days in reading, searching across the forum and net, but i did not find working solution how to match traffic originated from the router itself. Is there such possibility ?

Hello all I want to create "Virtual Ethernet device" - but not such as it is available for connecting to an meta router. I have this scenario: On my LAN side I have connected an WiFi AP that is in different subnet than local subnet (i.e. my local LAN clients are in 192.168.12.0/24, and my ...

I'm asking this because in this thread: http://forum.mikrotik.com/viewtopic.php?f=2&t=89320 I've described a problem which was caused by two things: - Wrong MTU value - I've used same ppp profile for multiple pptp clients When I've changed to correct MTU value, and when I've used a separate ppp ...

A quick question:

Can one ppp profile be used in multiple different pptp/sstp.. tunnels or best practise is for each tunnel to have separate ppp profile (even if profiles settings are same...) ?

Problem solved -

Cause was MTU size - I've set to 1400 and everything is OK !

No one ???

I've found this post on Sony's user support forum. It seems that other expirience this problem as well, and found solution on Juniper's SSG5... Any RouterOs guru that can point out how to solve this on ROuteros ? Here is the message taken from Sony's board: So I finally figured it out yesterday, tho...

why dont you try with nat rules? leave mangle as is (dynamic change mss) and try to nat with src address of your device to output interface of your vpn with action masquerade and see what happens. I already have masquerade rule for this interface... Ordinary traffic is going ok trough VPN ... I hav...

I have this problem for 6 months and never succeed to find an solution. So maybe someone can help. First I will make small background introduction of the problem: 1. I want to watch Netflix, Hulu and to connect to Nintendo US shopping channel - and currently I'm outside of US. Therefore I use VPN co...

Hi There! Can you post your config please??! Here it is: /ip ipsec peer > print /ip ipsec peer > print address=0.0.0.0/0 local-address=0.0.0.0 passive=no port=500 auth-method=pre-shared-key secret="Password" generate-policy=port-override exchange-mode=main-l2tp send-initial-contact=yes na...

SOLVED Problem was that inside IPSEC Peer definition there was Policy Group: default. I'm not sure if this value was present in v5.20 setup, or maybe it was set up by default after upgrade to v6.18. However removing the value for Policy Group (no value at all - NULL), solved the problem. I hope this...

Anyone ?

Hi, Yesterday I did upgrade from V5.20 to v6.18. HW is RouterBoard RB450G. Previously (on ver5.20) I have succesfully established L2TP/IPSEC with my WIndows 7/Android. After upgrade L2TP/IPSEC is not working anymore. Here is the log from RB: 22:56:26 ipsec,error failed to pre-process ph2 packet. 22:...